Behavioral task
behavioral1
Sample
af01861c6b35b36336e4d4efd90cbfca_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
af01861c6b35b36336e4d4efd90cbfca_JaffaCakes118
-
Size
834KB
-
MD5
af01861c6b35b36336e4d4efd90cbfca
-
SHA1
1c3054c7878ceb951e50a3d705b326a287c06fb8
-
SHA256
d9eb2058db5c07e2e0ad845a677b7d3d1eceb0982a043f69ee20783fe7b849c7
-
SHA512
5961974a380546ab69adb0828e0f7889ea4c0fc512bc58fdcb012e7628c67de3f11d2738ee1e88c665eff66f914c7022adb52d37d8ff7bb7743f0fde6ca25eea
-
SSDEEP
24576:68c5H/ILPZQppF/GhnpQ58FXGypOBGfr0nYWRXq:tWGPZ0F5soBmr0nYWRXq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af01861c6b35b36336e4d4efd90cbfca_JaffaCakes118
Files
-
af01861c6b35b36336e4d4efd90cbfca_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HUPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE